Asked before, answered plainly

If the site is mostly informational and changes rarely, Essential Security covers the fundamentals. If the site brings in enquiries or revenue, Business Care adds performance work and monitoring for the things that quietly break. If you want the site handled entirely, including small fixes and content changes, that is Complete Care. The comparison table shows every difference line by line.

Because the work is per site: each one gets its own monitoring, its own backups, its own update runs and its own report. "Unlimited sites" pricing usually means the work is spread thin; per-site pricing means each site gets the full plan. Sites on different tiers are fine — match the plan to what each site does.

All prices are per site and exclude VAT. Monthly plans are rolling and bill each month. Business Care and Complete Care can be billed yearly — £499 and £799 +VAT respectively, up to 15% less than monthly. There are no launch discounts or countdown offers; the price on the page is the price.

Yes. Sites change — a brochure site becomes a shop, a busy site goes quiet. Move between tiers as the site's needs change; we'll also tell you honestly if your current plan looks like the wrong fit, in either direction.

When a vulnerability is disclosed in a plugin or theme, there is a gap before the official fix is released and applied. Virtual patching, powered by Patchstack, blocks the attack at the firewall during that gap — protection the same day the vulnerability becomes known.

A backup is taken before every update run. If an update causes a conflict it is rolled back immediately and investigated before a retry. On Complete Care, major updates are tested on a staging copy first, so the live site never meets an untested change.

No — and that's deliberate. We maintain your site wherever it's hosted, which means our advice about hosting is never a sales pitch. If your host is the problem, we'll say so; a one-time migration can be quoted if you decide to move.

By email — every plan includes it, and Business Care and Complete Care requests are handled with priority. Monitoring itself is automated and runs around the clock regardless of plan.

A pre-existing infection is handled as a quoted one-time cleanup first, so the site starts its plan clean — you're never paying a subscription to fix an old problem. The cleanup page walks through the whole process: free scan, fixed quote, cleanup, verification.

Because a pre-existing infection is a one-time problem with a one-time cost, and folding it into a subscription would mean every clean site quietly subsidising the hacked ones. Plans include the things that stop infections — scanning, firewall, virtual patching, backups. Cleanup is quoted on its own, once, and then the plan takes over.

Quietly. Once you share access, we run the baseline audit, put our protections in place, and tell you if anything from the previous arrangement needs untangling — plugin licences that belong to them, backup tools that stop working when their subscription ends. There's no gap in coverage on our side.

WordPress admin access and hosting credentials, shared through a secure link we send — never plain email. Plus licences for any premium plugins, and a heads-up when someone else changes the site. That's the whole list; how it works has the detail.